Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53047

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc() call for cap_info->phys in __efi_capsule_setup_info() uses sizeof(phys_addr_t *) instead of sizeof(phys_addr_t), which might be causing an undersized allocation. The allocation is also inconsistent with the initial array allocation in efi_capsule_open() that allocates one entry with sizeof(phys_addr_t), and the efi_capsule_write() function that
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c1855833a3acc66db21b4123091b0d8f29ed781d649d1a62eaf7ff67475b0470
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/firmware/efi/capsule-loader.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.15"},{"lessThan":"4.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"se…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/firmware/efi/capsule-loader.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"22022cd8851703a58f67615a17bc7e9e8682785b","status":"affected","version":"f24c4d478013d82bd1b943df566fff3561d52864","versionType":"git"},{"lessThan":"67adde6bfdfd563a54b045d59aeb9a2d90c80697","status":"affected","version":"f24c4d478013d82bd1b943df566fff3561d52864","versionType":"git"},{"lessThan":"608e1f7bc9d171ab26c1fba288c97fc76363c27d","status":"affected","version":"f24c4d47…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/firmware/efi/capsule-loader.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.15"},{"lessThan":"4.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"se…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/firmware/efi/capsule-loader.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"22022cd8851703a58f67615a17bc7e9e8682785b","status":"affected","version":"f24c4d478013d82bd1b943df566fff3561d52864","versionType":"git"},{"lessThan":"67adde6bfdfd563a54b045d59aeb9a2d90c80697","status":"affected","version":"f24c4d478013d82bd1b943df566fff3561d52864","versionType":"git"},{"lessThan":"608e1f7bc9d171ab26c1fba288c97fc76363c27d","status":"affected","version":"f24c4d47…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/22022cd8851703a58f67615a17bc7e9e8682785b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/48a428215782321b56956974f23593e40ce84b7a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5e185330d902b12fe8e6eb4b8514b5d736d8d66d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/608e1f7bc9d171ab26c1fba288c97fc76363c27d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/67adde6bfdfd563a54b045d59aeb9a2d90c80697"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/8be69e9245f805566bac68ffc8574b64735fd996"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/ab3f7098a3a27175b91cfc947950f5c26855801b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/e0e6b14995fd6fa2c0df8c712d76ab32f0694c31"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a7051d3029b43a5eadd7c56ab01cac511f2dd3008b6f8662b3f0206c8d98831b · sha256:3346c72660261a80… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer